Nov 15 11:47:33 prd-ubuntu2004-docker-2c-2g-7676 passwd[674]: password for 'ubuntu' changed by 'root' Nov 15 11:47:33 prd-ubuntu2004-docker-2c-2g-7676 sshd[753]: Server listening on 0.0.0.0 port 22. Nov 15 11:47:33 prd-ubuntu2004-docker-2c-2g-7676 sshd[753]: Server listening on :: port 22. Nov 15 11:47:33 prd-ubuntu2004-docker-2c-2g-7676 systemd-logind[715]: New seat seat0. Nov 15 11:47:33 prd-ubuntu2004-docker-2c-2g-7676 systemd-logind[715]: Watching system buttons on /dev/input/event0 (Power Button) Nov 15 11:47:33 prd-ubuntu2004-docker-2c-2g-7676 systemd-logind[715]: Watching system buttons on /dev/input/event1 (AT Translated Set 2 keyboard) Nov 15 11:47:36 prd-ubuntu2004-docker-2c-2g-7676 sshd[1651]: error: kex_exchange_identification: Connection closed by remote host Nov 15 11:47:41 prd-ubuntu2004-docker-2c-2g-7676 sshd[2811]: Invalid user jenkins from 10.30.168.15 port 33970 Nov 15 11:47:41 prd-ubuntu2004-docker-2c-2g-7676 sshd[2811]: Received disconnect from 10.30.168.15 port 33970:11: Closed due to user request. [preauth] Nov 15 11:47:41 prd-ubuntu2004-docker-2c-2g-7676 sshd[2811]: Disconnected from invalid user jenkins 10.30.168.15 port 33970 [preauth] Nov 15 11:47:44 prd-ubuntu2004-docker-2c-2g-7676 sshd[4596]: Invalid user jenkins from 10.30.168.15 port 34006 Nov 15 11:47:44 prd-ubuntu2004-docker-2c-2g-7676 sshd[4596]: Received disconnect from 10.30.168.15 port 34006:11: Closed due to user request. [preauth] Nov 15 11:47:44 prd-ubuntu2004-docker-2c-2g-7676 sshd[4596]: Disconnected from invalid user jenkins 10.30.168.15 port 34006 [preauth] Nov 15 11:47:47 prd-ubuntu2004-docker-2c-2g-7676 sshd[5919]: Invalid user jenkins from 10.30.168.15 port 34028 Nov 15 11:47:48 prd-ubuntu2004-docker-2c-2g-7676 sshd[5919]: Received disconnect from 10.30.168.15 port 34028:11: Closed due to user request. [preauth] Nov 15 11:47:48 prd-ubuntu2004-docker-2c-2g-7676 sshd[5919]: Disconnected from invalid user jenkins 10.30.168.15 port 34028 [preauth] Nov 15 11:47:52 prd-ubuntu2004-docker-2c-2g-7676 sshd[7593]: Invalid user jenkins from 10.30.168.15 port 34060 Nov 15 11:47:52 prd-ubuntu2004-docker-2c-2g-7676 sshd[7593]: Received disconnect from 10.30.168.15 port 34060:11: Closed due to user request. [preauth] Nov 15 11:47:52 prd-ubuntu2004-docker-2c-2g-7676 sshd[7593]: Disconnected from invalid user jenkins 10.30.168.15 port 34060 [preauth] Nov 15 11:47:55 prd-ubuntu2004-docker-2c-2g-7676 sshd[9479]: Invalid user jenkins from 10.30.168.15 port 34090 Nov 15 11:47:55 prd-ubuntu2004-docker-2c-2g-7676 sshd[9479]: Received disconnect from 10.30.168.15 port 34090:11: Closed due to user request. [preauth] Nov 15 11:47:55 prd-ubuntu2004-docker-2c-2g-7676 sshd[9479]: Disconnected from invalid user jenkins 10.30.168.15 port 34090 [preauth] Nov 15 11:47:58 prd-ubuntu2004-docker-2c-2g-7676 sshd[10395]: Invalid user jenkins from 10.30.168.15 port 34108 Nov 15 11:47:58 prd-ubuntu2004-docker-2c-2g-7676 sshd[10395]: Received disconnect from 10.30.168.15 port 34108:11: Closed due to user request. [preauth] Nov 15 11:47:58 prd-ubuntu2004-docker-2c-2g-7676 sshd[10395]: Disconnected from invalid user jenkins 10.30.168.15 port 34108 [preauth] Nov 15 11:48:01 prd-ubuntu2004-docker-2c-2g-7676 CRON[11150]: pam_unix(cron:session): session opened for user root by (uid=0) Nov 15 11:48:01 prd-ubuntu2004-docker-2c-2g-7676 CRON[11150]: pam_unix(cron:session): session closed for user root Nov 15 11:48:01 prd-ubuntu2004-docker-2c-2g-7676 sshd[11097]: Invalid user jenkins from 10.30.168.15 port 34130 Nov 15 11:48:01 prd-ubuntu2004-docker-2c-2g-7676 sshd[11097]: Received disconnect from 10.30.168.15 port 34130:11: Closed due to user request. [preauth] Nov 15 11:48:01 prd-ubuntu2004-docker-2c-2g-7676 sshd[11097]: Disconnected from invalid user jenkins 10.30.168.15 port 34130 [preauth] Nov 15 11:48:06 prd-ubuntu2004-docker-2c-2g-7676 sshd[11679]: Invalid user jenkins from 10.30.168.15 port 34156 Nov 15 11:48:06 prd-ubuntu2004-docker-2c-2g-7676 sshd[11679]: Received disconnect from 10.30.168.15 port 34156:11: Closed due to user request. [preauth] Nov 15 11:48:06 prd-ubuntu2004-docker-2c-2g-7676 sshd[11679]: Disconnected from invalid user jenkins 10.30.168.15 port 34156 [preauth] Nov 15 11:48:08 prd-ubuntu2004-docker-2c-2g-7676 sshd[11804]: Invalid user jenkins from 10.30.168.15 port 34178 Nov 15 11:48:08 prd-ubuntu2004-docker-2c-2g-7676 sshd[11804]: Received disconnect from 10.30.168.15 port 34178:11: Closed due to user request. [preauth] Nov 15 11:48:08 prd-ubuntu2004-docker-2c-2g-7676 sshd[11804]: Disconnected from invalid user jenkins 10.30.168.15 port 34178 [preauth] Nov 15 11:48:12 prd-ubuntu2004-docker-2c-2g-7676 sshd[11808]: Invalid user jenkins from 10.30.168.15 port 34202 Nov 15 11:48:12 prd-ubuntu2004-docker-2c-2g-7676 sshd[11808]: Received disconnect from 10.30.168.15 port 34202:11: Closed due to user request. [preauth] Nov 15 11:48:12 prd-ubuntu2004-docker-2c-2g-7676 sshd[11808]: Disconnected from invalid user jenkins 10.30.168.15 port 34202 [preauth] Nov 15 11:48:17 prd-ubuntu2004-docker-2c-2g-7676 sshd[11878]: Invalid user jenkins from 10.30.168.15 port 34250 Nov 15 11:48:17 prd-ubuntu2004-docker-2c-2g-7676 sshd[11878]: Received disconnect from 10.30.168.15 port 34250:11: Closed due to user request. [preauth] Nov 15 11:48:17 prd-ubuntu2004-docker-2c-2g-7676 sshd[11878]: Disconnected from invalid user jenkins 10.30.168.15 port 34250 [preauth] Nov 15 11:48:21 prd-ubuntu2004-docker-2c-2g-7676 useradd[12514]: new group: name=jenkins, GID=1001 Nov 15 11:48:21 prd-ubuntu2004-docker-2c-2g-7676 useradd[12514]: new user: name=jenkins, UID=1001, GID=1001, home=/home/jenkins, shell=/bin/bash, from=none Nov 15 11:48:21 prd-ubuntu2004-docker-2c-2g-7676 usermod[12546]: add 'jenkins' to group 'docker' Nov 15 11:48:21 prd-ubuntu2004-docker-2c-2g-7676 usermod[12546]: add 'jenkins' to shadow group 'docker' Nov 15 11:48:21 prd-ubuntu2004-docker-2c-2g-7676 sshd[12270]: Received disconnect from 10.30.168.15 port 34274:11: Closed due to user request. [preauth] Nov 15 11:48:21 prd-ubuntu2004-docker-2c-2g-7676 sshd[12270]: Disconnected from authenticating user jenkins 10.30.168.15 port 34274 [preauth] Nov 15 11:48:25 prd-ubuntu2004-docker-2c-2g-7676 sshd[13840]: Accepted publickey for jenkins from 10.30.168.15 port 34320 ssh2: RSA SHA256:BBsm4mRgG5V0fGum4Y1Rmy/vs16stdRVhwvexlLUhUs Nov 15 11:48:25 prd-ubuntu2004-docker-2c-2g-7676 sshd[13840]: pam_unix(sshd:session): session opened for user jenkins by (uid=0) Nov 15 11:48:25 prd-ubuntu2004-docker-2c-2g-7676 systemd-logind[715]: New session 2 of user jenkins. Nov 15 11:48:25 prd-ubuntu2004-docker-2c-2g-7676 systemd: pam_unix(systemd-user:session): session opened for user jenkins by (uid=0) Nov 15 11:49:01 prd-ubuntu2004-docker-2c-2g-7676 CRON[27395]: pam_unix(cron:session): session opened for user root by (uid=0) Nov 15 11:49:01 prd-ubuntu2004-docker-2c-2g-7676 CRON[27395]: pam_unix(cron:session): session closed for user root Nov 15 11:50:01 prd-ubuntu2004-docker-2c-2g-7676 CRON[28902]: pam_unix(cron:session): session opened for user root by (uid=0) Nov 15 11:50:01 prd-ubuntu2004-docker-2c-2g-7676 CRON[28902]: pam_unix(cron:session): session closed for user root Nov 15 11:51:01 prd-ubuntu2004-docker-2c-2g-7676 CRON[29550]: pam_unix(cron:session): session opened for user root by (uid=0) Nov 15 11:51:01 prd-ubuntu2004-docker-2c-2g-7676 CRON[29550]: pam_unix(cron:session): session closed for user root Nov 15 11:51:12 prd-ubuntu2004-docker-2c-2g-7676 sudo: jenkins : TTY=unknown ; PWD=/w/workspace/odlparent-tox-verify-master ; USER=root ; COMMAND=/usr/bin/cp /var/log/auth.log /tmp Nov 15 11:51:12 prd-ubuntu2004-docker-2c-2g-7676 sudo: pam_unix(sudo:session): session opened for user root by (uid=0)